Malicious code in crustyhttp (PyPI)

Base64-encoded commands are executed from init.py, which exfiltrate Telegram session data. Source: kam193 806b071147126057a7de9b570f85f694ad06923e4d580ddd5274731b5343f556 In the invokehttp, the init.py contains obfuscated code attempting to download and run one of two executables. They are...

CVE-2021-41697

creationtimestamp| type| source ---|---|--- 2021-12-09 18:24:11+00:00| seen| https://t.me/cibsecurity/33702...